Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          LWI/Kh8SzokUvU9as0PbkM8klYUCbciBxbTiCveFPsc=
Subject key identifier:   9B:E8:E4:32:42:9F:38:50:9A:73:77:C1:95:4C:8F:DC:41:68:27:32
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       01962F74695C721E85ED7CD55D0188E26517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
                          2: 79gW3YAt2XuqijR7nl5mfFtOLk8.roa (hash: 4986fTnHGnlxMjpLE7ZRIeQ2cNZOfNLwZxbij5ru624=)
                          3: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: TAOKFKHZv3LtckVPiuPBPQT079hLOV8qygw1kvwNmfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:69:5c:72:1e:85:ed:7c:d5:5d:01:88:e2:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=9be8e432429f38509a7377c1954c8fdc41682732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:6b:80:a7:60:7f:ac:69:a6:a7:60:27:40:
                    57:68:90:25:89:2b:22:88:7b:be:24:b2:97:3b:f6:
                    d5:84:0a:13:96:4b:70:32:74:80:cd:a5:7e:73:ff:
                    91:56:bf:b2:1c:ad:46:1c:d8:09:cb:01:c7:17:3a:
                    f0:a4:9b:52:a6:61:8c:5e:2f:51:ca:3d:61:d5:39:
                    40:8d:db:19:74:e6:11:25:1a:55:19:4c:f5:88:e2:
                    1e:66:de:88:c4:d8:db:0b:7a:18:c7:35:78:fb:d3:
                    4f:76:7f:71:7a:1b:70:b3:91:88:e8:f1:0e:ad:4f:
                    7f:fd:2e:42:d9:ed:21:68:39:57:a3:c3:82:96:ba:
                    a9:40:d5:f8:10:b8:c1:c8:7f:01:64:b8:12:e1:d5:
                    70:10:ed:a0:84:13:90:f9:41:b9:ed:86:16:58:3a:
                    10:da:cf:1c:1a:b4:cb:b0:7e:a2:6c:c6:ff:15:ad:
                    62:81:f7:42:a8:05:1a:57:09:d5:9f:de:83:b8:da:
                    2d:e1:e0:84:24:0a:92:2e:f1:45:2e:e5:34:ab:55:
                    aa:5b:c6:b3:e8:af:b9:70:37:30:db:0e:d5:a6:7c:
                    3f:9f:71:33:82:b3:68:95:ab:99:2c:42:0d:5d:03:
                    7c:45:0b:b9:f1:08:01:ed:9b:2b:ea:a8:ff:1a:b5:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:E4:32:42:9F:38:50:9A:73:77:C1:95:4C:8F:DC:41:68:27:32
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:b2:b4:9f:db:11:b0:e9:0d:f2:47:e2:41:7f:66:05:9f:
         be:7c:65:bc:12:a2:d2:fc:ba:98:22:36:a9:61:17:07:3b:cb:
         eb:d4:c1:0d:81:b3:6b:65:29:08:60:66:d8:96:4b:9c:39:11:
         68:fc:ae:f4:fe:34:60:3c:d2:e7:67:f3:78:e4:55:4e:57:38:
         ff:49:cf:14:c9:c7:d6:3d:ae:01:09:d3:82:2a:c1:82:58:89:
         6d:d1:d7:79:ce:e2:10:4b:23:a0:d3:93:61:fb:4f:79:ab:e4:
         23:81:48:db:dd:50:53:be:cc:b1:90:5d:78:65:54:41:c9:26:
         37:3f:5b:b3:89:df:39:bf:f3:1f:66:b9:8a:b2:e6:77:a5:15:
         f6:be:76:6c:de:24:2d:6a:95:97:8f:37:5e:3e:11:38:cd:b2:
         5a:37:93:a3:6c:7b:65:10:11:12:29:d5:df:3a:3b:4d:79:e0:
         9e:16:80:ca:31:e8:08:0c:cf:7b:d0:47:56:0e:5d:78:66:ad:
         92:4c:12:a2:b6:95:40:bf:a9:ea:12:0a:cc:64:a5:c1:9d:c7:
         57:8b:c3:06:a2:87:88:5c:5e:34:49:0e:0a:a0:4c:23:2f:c1:
         dd:5f:40:e9:09:29:7a:fb:4f:fe:0f:32:4e:9e:c8:37:4a:70:
         e1:72:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----